2.2 - Understand and Support Internetwork Trust Architectures SSCP Practice Questions (Page 4)

Questions 16–17

1. 16expert · hard · select all that apply

   A company is integrating a third-party SaaS application with its internal systems using an API. The security team wants to ensure that the integration is secure. Which of the following are best practices? (Select all that apply.)

   • AUse HTTPS for all API communications.
   • BValidate and sanitize all input from the API.
   • CExpose the API without authentication for ease of integration.
   • DUse OAuth 2.0 for authentication and authorization.
   • EUse API keys for all requests.
   Check answers Discussion Select an answer first
2. 17application · medium

   A company is implementing a zero trust architecture. Which of the following is the most important principle to apply?

   • ARequire multi-factor authentication only for remote users.
   • BUse a strong firewall to protect the network perimeter.
   • CTrust users once they are on the internal network.
   • DVerify every access request regardless of the user's location or device.
   Reveal Solution Discussion Select an answer first